Skip to content
← Resources

Data protection

What Aksh holds, who can see it, export and retention.

Roles

Your organisation is the controller of the patient data it brings to Aksh; Aksh processes it on your instructions under a data processing agreement. A patient’s own account data, before they link to a clinic, is held for that patient.

What is held

  • Patient details you import, the waiting list, slots and the record of each action.
  • Readings and CGM data from uploads, devices and the patient app.
  • Staff accounts, registrations checked, invites and organisation settings.
  • An audit trail of significant actions.

Export

Organisation admins export everything their organisation holds from Organisation → Settings, in one machine-readable file. Patients download their own record from the app. Both are audited.

Retention

Clinical records and their history are kept for the life of your agreement and returned or deleted at its end, as the agreement sets out. Error logs are kept for 90 days, scrubbed of personal details. Rate-limit counters are kept for 24 hours.

See also Security and our privacy notice.